Portfolio

Contact & Links

Email:

Education

Experiences

Projects

Department of AI & Cybersecurity – File Explorer Development (2024)

Filesystem viewer with basic operations and attention to secure handling.

Department of AI & Cybersecurity – KO-Map (Korea Map Exploration Website) (2024)

Interactive map browsing and data exploration prototype.

KnockOn bootcamp – CRUD, File Upload, Paging, User Account Implementation (2025)

Full-stack training exercises focusing on correctness and security.

WhiteHat School Team 404 Not Found – LLM-integrated Web Application Bug Hunting (2025)

LLM-integrated app bug hunting initiatives and triage process.

Tegenboys SBOMiner – SBOM generator with security code (2025)

Generate SBOM with security annotations to aid audits.

KUality LLM…HMM… (Ongoing)

Building an LLM‑assisted pipeline to automatically find vulnerabilities in WordPress plugins and themes.

CVE

CVE-2025-56526

XSS vulnerability in Kotaemon 0.11.0 allowing arbitrary code execution via crafted PDF
(with Team 404 Not Found 퇴근)

CVE-2025-56527

Plaintext password storage in Kotaemon 0.11.0 in the client’s localStorage
(with Team 404 Not Found 퇴근)

CVE-2025-57298

XSS in Kotaemon 0.11.0
(with Team 404 Not Found 퇴근)

CVE-2025-57164

Flowise through v3.0.4 vulnerable to RCE via unsanitized evaluation of user input in "Supabase RPC Filter"
(with Team 404 Not Found 퇴근)

CVE-2025-57165

Directory Traversal vulnerability in Kotaemon ≤ 0.11.0
(with Team 404 Not Found 퇴근)

CTF

Awards

Conference

Languages

Affiliations